Privacy Policy

Data Privacy is more important than ever nowadays. NicSRS PTE.LTD. Global (“NicSRS”) is fully compliant with all data privacy standards. To better protect your privacy, we provide this notice explaining our data collection practices and the control you have over the way your information is collected and used. To make this notice easy to find, we make it available as a link on the bottom of every page on the nicsrs.com site in addition to linking to it from our privacy notices.

Scope

NicSRS’ privacy policy applies to personal information about identifiable NicSRS customers that is collected, used, or disclosed by NicSRS. It also applies to all services of NicSRS that include page browsing, website login services, and technical services provided by NicSRS website. This privacy policy does not apply to services provided by other third parties. For example, when the service providers in NicSRS rely on the cloud market to provide services to you, this privacy policy does not apply to the information you provide to the service providers. In particular, as a user of NicSRS, if you use NicSRS’ technical services to offer services to your users, you should separately agree on privacy policy with your users.

General Application

Personal information which may fall under the policy may include, but is not limited to:

• Usernames and passwords;
• Technical support records;
• Credit history/performance information;
• How much is spent on NicSRS’ services and that of its competitors;
• Industry or business data;
• Credit card information;
• Date and location of birth;
• Citizenship data;
• National or local identification number;
• Taxation data;
• Language preferences;
• Internet protocol address and time stamps;
• Payment and banking information;
• Special needs.

This information is based on the data elements requested by registries and may include data points that are not relevant to your specific case.

Personal information may be collected when:

A person makes any inquiries by telephone, agrees to a contract, provides any information by email or through the Internet, inquires about their services, receives technical support, registers an account online, makes additional orders for services, or when they make a complaint.

Guidelines for Internet/Website Users

There are additional guidelines that apply to persons who use the Websites and portals. In addition to the principles outlined above, NicSRS may permit third parties to offer users subscription and/or registration-based services through the Websites. In such circumstances, NicSRS cannot be responsible for the content of any third-party offerings or any actions or policies of such third parties.

NicSRS also reminds users that voluntarily-disclosed information online in discussion areas or other public areas of the Websites can be collected and used by third parties and may result in unsolicited messages from third parties. Unfortunately, such activities are beyond the control of NicSRS.

In some cases, users’ non-personal information and data may be automatically collected through the standard operation of NicSRS Internet servers or through the use of “cookies”. “Cookies” are small text files that are used by websites to: (a) recognize repeat users; (b) track usage behavior; and (c) compile aggregate data that will permit content improvements and targeted advertising. NicSRS cannot control or prevent the use of cookies or any information obtained through such cookies by advertisers or third parties. If you do not want information collected through the use of cookies, most browsers permit you to disable the cookie feature. However, cookies may be required for the use of certain features on the Websites.

Any submissions made to discussion areas or other public areas on the Websites are done with a user’s understanding that they are accessible to third parties. If comments are not intended for third parties, you are advised not to make any submissions.

NicSRS’ policy generally and in connection with Internet use is subject to the requirements or provisions of any applicable legislation, regulations, contracts, or agreements, or order of any court or other lawful authority. Your use of the Websites is also subject to these requirements as well as NicSRS’ Acceptable Use Policy.

The Privacy Principles NicSRS Follows

There are ten principles that form the basis of NicSRS’ policy. These principles are interrelated and NicSRS adheres to them as a whole. Each principle must be read in conjunction with the accompanying commentary. The commentary in NicSRS’ policy may be tailored to reflect personal information issues specific to NicSRS.

Definitions

To better understand our policy, NicSRS has set out some basic definitions to use when reading and interpreting the principles below:

Collection:the act of gathering, acquiring, recording, or obtaining personal information from any source, including third parties, by any means.

Consent:voluntary agreement with the collection, use, and disclosure of personal information for defined purposes. Consent can be provided directly by the individual or by an authorized representative of an entity.

Customer: an individual or entity that uses, or applies to use, NicSRS’ products or services including, but not limited to, both resellers and registrants.

Disclosure: making personal information available to a third party.

Personal information:information about an identifiable individual that is recorded in any form; this does not include aggregated information that cannot be associated with an individual. For a customer, such information does not include information that is aggregated in such a manner that it cannot be connected to them and/or information that is publicly listed in a written or online directory.

Third party:an individual or organization outside NicSRS.

Use: the treatment, handling, and management of personal information by and within NicSRS.

Principle 1 Accountability

NicSRS is responsible for personal information under its control. In response, it has designated its Data Protection Officer (“DPO”) as accountable for the company’s compliance with the following principles.

1. Responsibility for ensuring compliance with the provisions of the NicSRS policy rests with the Legal Department within NicSRS, which shall designate one or more persons to be accountable for compliance with the NicSRS policy. Other individuals within NicSRS may be delegated to act on behalf of the designated person(s) or to take responsibility for the day-to-day collection and processing of personal information. The DPO has been designated in order that NicSRS may ensure that consumers have a resource to answer their privacy-related inquiries.
2. NicSRS shall make known, upon request, the identity of the person or persons designated to oversee NicSRS’ compliance with its policy.
3. NicSRS is responsible for personal information in its possession or control. NicSRS shall use appropriate means to provide a comparable level of protection while information is being processed by a third party.
4. NicSRS shall implement policies and practices to give effect to these principles, including:
   • Implementing procedures to protect personal information and to oversee NicSRS’ compliance with its policy;
   • Establishing procedures to receive and respond to inquiries or complaints;
   • Training and communicating to staff about NicSRS’ policies and practices;and
   • Developing information to explain NicSRS’ policies and practices.

Principle 2 Identifying Purposes for Collection of Personal Information

NicSRS shall identify the purposes for which personal information is collected within a reasonable period after obtaining the data, and prior to using the data.

1. NicSRS collects personal information only for the following purposes:
   • To establish and maintain responsible commercial relations with customers and to provide ongoing services and offers;
   • To understand customer needs;
   • To develop, enhance, market, or provide products and services;
   • To manage and develop NicSRS’ business and operations, including personnel and employment matters; and
   • To meet legal, regulatory, and contractual requirements.
2. To meet legal, regulatory, and contractual requirements.
   • NicSRS shall specify orally, electronically, or in writing the identified purposes to the customer or employee at the time personal information is collected or within a reasonable period. Upon request, persons collecting personal information shall explain these identified purposes or refer the individual to a designated person within NicSRS who shall explain the purposes.
   • Unless required by law, NicSRS shall not use or disclose for any new purpose personal information that has been collected without first identifying and documenting the new purpose and obtaining the consent of the customer.

Principle 3 Obtaining Consent for Collection, Use, or Disclosure of Personal Information

The knowledge and consent of a customer is required for the collection, use, or disclosure of personal information, except where inappropriate.

NOTE: In certain circumstances personal information can be collected, used, or disclosed without the knowledge and consent of the individual. For example, when required to fulfil a contract or when information is being collected for the detection and prevention of fraud or for law enforcement, seeking the consent of the individual might defeat the purpose of collecting the information.

1. In obtaining consent, NicSRS shall use reasonable efforts to ensure that a customer is advised of the identified purposes for which personal information collected will be used or disclosed. Purposes shall be stated in a manner that can be reasonably understood by the customer or employee.
2. Generally, NicSRS shall seek consent to use and disclose personal information at the same time it collects the information. However, NicSRS may seek consent to use and disclose personal information after it has been collected but before it is used or disclosed for a new purpose.
3. NicSRS will only require customers to consent to the collection, use, or disclosure of personal information as a condition to the supply of a product or service if such collection, use, or disclosure is required to fulfill the identified purposes.
4. In determining the appropriate form of consent, NicSRS shall take into account the sensitivity of the personal information and the reasonable expectations of its customers.
5. Unless required by contract, NicSRS will obtain express consent within a reasonable period after obtaining the data and prior to using the data.
6. A customer may withdraw consent at any time, subject to legal, regulatory, or contractual restrictions and reasonable notice. For example, if consent is required to perform the service requested by the customer, withdrawal of consent may result in termination of the service. Customers may contact NicSRS at the address below for more information regarding the implications of doing so.

Principle 4 Limiting Collection of Personal Information

NicSRS shall limit the collection of personal information to that which is necessary for the identified purposes. NicSRS shall collect personal information by fair and lawful means.

• NicSRS collects personal information primarily from its customers.
• NicSRS may also collect personal information from other sources including but not limited to credit bureaus or other third parties who represent that they have the right to disclose the information.

Principle 5 Limiting Use, Disclosure, and Retention of Personal Information

NicSRS shall not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required by a registry or by law. NicSRS shall retain personal information only as long as necessary for the fulfillment of those purposes or as required by law.

1. NicSRS may disclose a customer’s personal information to:
   • A registrant or end-user’s reseller;
   • A third party service provider for the efficient and cost-effective provision of services purchased through the Websites;
   • Another person or corporation as part of conducting business together or pursuant to the sale of all or substantially all of NicSRS’ assets related to one or more specific lines of business;
   • A company involved in supplying communications or communications directory related services;
   • A company or individual employed by NicSRS to perform functions on its behalf;
   • Another company or person for the development, enhancement, marketing, or provision of any of NicSRS’ products or services;
   • An agent or third party retained by NicSRS in connection with NicSRS’ administration or the provision of NicSRS’ products or services;
   • An agent used by NicSRS to evaluate the customer’s creditworthiness or to collect the customer’s account;
   • Credit grantors and reporting agencies;
   • A public authority or agent of a public authority, if in the reasonable judgment of NicSRS, it appears that there is imminent danger to life or property which could be avoided or minimized by disclosure of this information;
   • A person who, in the reasonable judgment of NicSRS, is seeking the information as an agent of the customer; and
   • A third party or parties, where the customer consents to such disclosure or disclosure is required by law or emergency.
   NicSRS reserves the right to contact persons at any time regarding account status, changes to services, and other matters relevant to underlying services and/or personal information. Except as permitted in this Principle, NicSRS does not provide or sell its customer lists to any outside company for use in marketing or solicitation.
2. Only NicSRS’ employees with a business need to know, or whose duties reasonably so require, are granted access to personal information that is not publicly available about customers.
3. NicSRS shall keep personal information only as long as it remains necessary or relevant for the identified purposes or as required by law. Depending on the circumstances, where personal information has been used to make a decision about a customer, NicSRS shall retain, for a period of time that is reasonably sufficient to allow for access by the customer, either the actual information or the rationale for making the decision.
4. Personal information that is no longer necessary or relevant for the identified purposes or required to be retained by law shall be destroyed, erased, or made anonymous. In any event, NicSRS shall maintain reasonable and systematic controls, schedules, and practices for such information, its retention and destruction.

Principle 6 Accuracy of Personal Information

Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.

1. Personal information used by NicSRS shall be sufficiently accurate, complete, and up-to-date to minimize the possibility that inappropriate information may be used to make a decision about a customer.
2. NicSRS shall update personal information about customers as and when necessary to fulfill the identified purposes or upon notification by the individual.

Principle 7 Security Safeguards

NicSRS shall protect personal information by implementing security safeguards appropriate to the sensitivity of the information.

1. NicSRS shall protect personal information against such risks as loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction, through appropriate security measures. NicSRS shall protect the information regardless of the format in which it is held.
2. NicSRS shall protect personal information it discloses to third parties by contractual agreements stipulating the confidentiality of the information and the purposes for which it is to be used.
3. All of NicSRS’ employees with access to personal information shall be required as a condition of employment to contractually respect the confidentiality of personal information.

Principle 8 Openness Concerning Policies and Practices

NicSRS shall make readily available to customers and employees specific information about its policies and practices relating to the management of personal information.

1. NicSRS shall make information about its policies and practices easy to understand, including:
   • The title and address of the DPO, who is accountable for NicSRS’ compliance with the policy and to whom inquiries or complaints can be forwarded;
   • The means of gaining access to personal information held by NicSRS; and
   • A description of the type of personal information held by NicSRS, including a general account of its use.

Principle 9 Customer Access to Personal Information

NicSRS shall inform a customer of the existence, use, and disclosure of their personal information upon request and shall give the individual access to that information. A customer shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

NOTE:In certain situations, NicSRS may not be able to provide access to all of the personal information it holds about a customer. Exceptions may include information that is prohibitively costly to provide, information that contains references to other individuals, information that cannot be disclosed for legal, security, commercial proprietary reasons, or information that is subject to attorney-client or litigation privilege. NicSRS shall provide the reasons for denying access upon request.

1. Upon request, NicSRS shall afford customers a reasonable opportunity to review the personal information it holds. Personal information shall be provided in understandable form within a reasonable time and at a minimal or no cost to the individual.
2. Upon request, NicSRS shall provide an account of the use and disclosure of personal information. In providing an account of disclosure, NicSRS shall provide a list of organizations to which it may have disclosed personal information about the individual when it is not possible to provide an actual list.
3. In order to safeguard personal information, a customer may be required to provide sufficient identification information to permit NicSRS to account for the existence, use, and disclosure of personal information and to authorize access to the individual’s file. Any such information shall be used only for this purpose.
4. NicSRS shall promptly correct or complete any personal information found to be inaccurate or incomplete. Any unresolved differences as to accuracy or completeness shall be noted in the individual’s file. Where appropriate, NicSRS shall transmit to third parties having access to the personal information in question any amended information or the existence of any unresolved differences.
5. Customers can obtain information or seek access to their individual files by contacting a designated representative at NicSRS’ business offices as described below.

Principle 10 Challenging Compliance

A customer shall be able to address a challenge concerning compliance with the above principles to the designated person or persons accountable for NicSRS’ compliance with the policy.

1. NicSRS shall maintain procedures for addressing and responding to all inquiries or complaints from its customers about NicSRS’ handling of personal information.
2. NicSRS shall inform its customers about the existence of these procedures as well as the availability of complaint procedures.
3. The person or persons accountable for compliance with NicSRS’ policy may seek external advice where appropriate before providing a final response to individual complaints.
4. NicSRS shall investigate all complaints concerning compliance with the policy. If a complaint is found to be justified, NicSRS shall take appropriate measures to resolve the complaint including, if necessary, amending its policies and procedures.

If you have any questions, comments or suggestions regarding the content of this policy, you may contact us to submit a ticket at nircsrs.com or call our customer service (18621783170).